HackingDelayed DiscoveryIDENTITY_BASICLowContained
McKenzie Memorial Hospital
bd_3cb138a829f15ef9 · schema v1 · pii pii-v1
Full breach record for McKenzie Memorial Hospital →McKenzie Memorial Hospital notified consumers of a data breach occurring between April 14-15, 2025. Unauthorized access may have resulted in the exposure of names. The hospital engaged third-party investigators, notified law enforcement, and is offering 12 months of credit monitoring. The incident status is contained.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_457ee2e873164bb4Maine State AGfiled 2025-07-24Verified
- bd_4cdd9242a38ba23fHHS OCRfiled 2025-07-24Verified
- bd_aa5561ddf0b0a58fNew Hampshire State AGfiled 2025-07-24Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-24-mckenzie-memorial-hospital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2025
- Raw hash
- 5115e7f62385611f27b2bc71c9e8d6c5d4b3243e94e1debccb4d11d3e766dfcd
Reporting entity
- Name
- McKenzie Health Systemnorm: mckenzie health system
Victim entity
- Name
- McKenzie Memorial Hospitalnorm: mckenzie memorial hospital
Incident
- Discovered
- Apr 15, 2025
- Materiality determined
- —
- Notification sent
- Jul 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified law enforcement
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.